"""
Copyright (c) 2022 Huawei Technologies Co.,Ltd.

openGauss is licensed under Mulan PSL v2.
You can use this software according to the terms and conditions of the Mulan PSL v2.
You may obtain a copy of Mulan PSL v2 at:

          http://license.coscl.org.cn/MulanPSL2

THIS SOFTWARE IS PROVIDED ON AN "AS IS" BASIS, WITHOUT WARRANTIES OF ANY KIND,
EITHER EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO NON-INFRINGEMENT,
MERCHANTABILITY OR FIT FOR A PARTICULAR PURPOSE.
See the Mulan PSL v2 for more details.
"""
"""
Case Type   : 防篡改
Case Name   : INDEPENDENT用户将外部数据源的访问权限赋予给指定的用户或角色
Create At   : 2022/3/29
Owner       : @daiguatutu
Description :
    1.设置参数并重启数据库enableseparationofduty=off
    2.创建independent和sysadmin用户
    3.安装扩展,创建外部服务器,创建创建用户映射
    4.外部服务授权给independent用户
    5.切换independent角色,创建表和外表
    6.切换independent角色,赋权给sysadmin用户
    7.清理环境
Expect      :
    1.成功
    2.成功
    3.成功
    4.成功
    5.成功
    6.成功
    7.清理环境成功
History     :
"""

import os
import unittest

from testcase.utils.Common import Common
from testcase.utils.CommonSH import CommonSH
from testcase.utils.Constant import Constant
from testcase.utils.Logger import Logger
from yat.test import Node
from yat.test import macro


class Security(unittest.TestCase):
    def setUp(self):
        self.log = Logger()
        self.log.info(f'-----{os.path.basename(__file__)} start-----')
        self.pri_sh = CommonSH('PrimaryDbUser')
        self.pri_node = Node('PrimaryDbUser')
        self.constant = Constant()
        self.common = Common()
        self.u_name = 'u_security_indenpendentuser_0033'
        self.u_name_01 = 'u_security_indenpendentuser_0033_01'
        self.t_name = 't_security_indenpendentuser_0033'
        self.t_name1 = 't_security_indenpendentuser_0033_01'
        self.fs_name = 'fs_subpartition_0177'
        self.default_value1 = self.common.show_param('enableSeparationOfDuty')
        self.file_path = os.path.join(macro.DB_INSTANCE_PATH,
                                      f'{self.t_name}.sql')

    def test_security(self):
        text = '-----step1：设置参数并重启数据库enableSeparationOfDuty=off; ' \
               'expect:成功-----'
        self.log.info(text)
        if self.default_value1 != 'off':
            mod_msg = self.pri_sh.execute_gsguc('set',
                                                self.constant.GSGUC_SUCCESS_MSG,
                                                'enableSeparationOfDuty=off')
            self.assertTrue(mod_msg, '执行失败:' + text)
            result = self.pri_sh.restart_db_cluster()
            self.assertTrue(result, '执行失败' + text)

        text = '-----step2：创建independent和sysadmin用户 expect:成功-----'
        self.log.info(text)
        create_cmd = f"drop user if exists {self.u_name}," \
            f"{self.u_name_01} cascade; " \
            f"create user {self.u_name} independent password " \
            f"'{macro.COMMON_PASSWD}';" \
            f"create user {self.u_name_01} sysadmin password " \
            f"'{macro.COMMON_PASSWD}';"
        msg = self.pri_sh.execut_db_sql(create_cmd)
        self.log.info(msg)
        self.assertIn(self.constant.DROP_ROLE_SUCCESS_MSG, msg,
                      '执行失败:' + text)
        self.assertEqual(2, msg.count(self.constant.CREATE_ROLE_SUCCESS_MSG),
                         '执行失败:' + text)

        text = '-----step3：安装扩展,创建外部服务器,创建创建用户映射 expect:成功-----'
        self.log.info(text)
        create_cmd = f"drop extension if exists postgres_fdw cascade;" \
            f"create extension if not exists postgres_fdw;" \
            f"drop server if exists {self.fs_name} cascade;" \
            f"create server {self.fs_name} foreign data wrapper " \
            f"postgres_fdw options (dbname '{self.pri_node.db_name}', " \
            f"port '{self.pri_node.db_port}');" \
            f"drop user mapping if exists for {self.u_name} " \
            f"server {self.fs_name};" \
            f"create user mapping for {self.u_name} server {self.fs_name};"
        msg = self.pri_sh.execut_db_sql(create_cmd)
        self.log.info(msg)
        self.assertIn(self.constant.drop_extension_success, msg,
                      '执行失败:' + text)
        self.assertIn(self.constant.create_extension_success, msg,
                      '执行失败:' + text)
        self.assertIn(self.constant.drop_server_success, msg, '执行失败:' + text)
        self.assertIn(self.constant.create_server_success, msg,
                      '执行失败:' + text)
        self.assertIn(self.constant.drop_usermapping_success, msg,
                      '执行失败:' + text)
        self.assertIn(self.constant.create_usermapping_success, msg,
                      '执行失败:' + text)

        text = '-----step4：外部服务授权给independent用户 expect:成功-----'
        self.log.info(text)
        create_cmd = f"grant all on foreign server {self.fs_name} " \
            f"to {self.u_name};"
        msg = self.pri_sh.execut_db_sql(create_cmd)
        self.log.info(msg)
        self.assertIn(self.constant.GRANT_SUCCESS_MSG, msg, '执行失败:' + text)

        text = '-----step5：切换independent用户,创建表和外表; expect:成功-----'
        self.log.info(text)
        sql_cmd = f"create table {self.t_name}(col_1 int ," \
            f"col_2 int,col_3 varchar2 ( 30 ) ,col_4 int );" \
            f"create foreign table {self.t_name1} (col_1 int ," \
            f"col_2 int,col_3 varchar2 ( 30 ) ,col_4 int) " \
            f"server {self.fs_name} options (schema_name '{self.u_name}', " \
            f"table_name '{self.t_name}');"
        connect = f'-U {self.u_name} -W {macro.COMMON_PASSWD}'
        msg = self.pri_sh.execut_db_sql(sql_cmd, sql_type=connect)
        self.log.info(msg)
        self.assertIn(self.constant.CREATE_TABLE_SUCCESS, msg, '执行失败:' + text)
        self.assertIn(self.constant.CREATE_FOREIGN_SUCCESS_MSG, msg,
                      '执行失败:' + text)

        text = '-----step6：切换independent用户,赋权给sysadmin用户; expect:成功-----'
        self.log.info(text)
        sql_cmd = f"grant all on table {self.t_name1} to {self.u_name_01};"
        msg = self.pri_sh.execut_db_sql(sql_cmd, sql_type=connect)
        self.log.info(msg)
        self.assertIn(self.constant.GRANT_SUCCESS_MSG, msg, '执行失败:' + text)

    def tearDown(self):
        self.log.info('-----step7：清理环境-----')
        text1 = '-----删除用户,外部服务,扩展 expect:成功-----'
        self.log.info(text1)
        drop_cmd = f"drop user if exists {self.u_name}," \
            f"{self.u_name_01} cascade;" \
            f"drop server if exists {self.fs_name} cascade;" \
            f"drop extension if exists postgres_fdw cascade;"
        drop_msg = self.pri_sh.execut_db_sql(drop_cmd)
        self.log.info(drop_msg)

        text2 = '-----修改参数enableSeparationOfDuty为初始值 expect:成功-----'
        self.log.info(text2)
        mod_msg1 = self.pri_sh.execute_gsguc('set',
                                             self.constant.GSGUC_SUCCESS_MSG,
                                             f'enableSeparationOfDuty='
                                             f'{self.default_value1}')
        restart_res = self.pri_sh.restart_db_cluster()

        self.log.info('-----断言tearDown执行成功-----')
        self.assertIn(self.constant.DROP_ROLE_SUCCESS_MSG, drop_msg,
                      '执行失败:' + text1)
        self.assertIn(self.constant.drop_server_success, drop_msg,
                      '执行失败:' + text1)
        self.assertIn(self.constant.drop_extension_success, drop_msg,
                      '执行失败:' + text1)
        self.assertTrue(mod_msg1, '执行失败:' + text2)
        self.assertTrue(restart_res, '执行失败:' + text2)
        self.log.info(f'-----{os.path.basename(__file__)} end-----')
